Privacy Policy

Effective date: [EFFECTIVE DATE]

AuLens is a conversation-archiving and CRM-integration service operated by [LEGAL ENTITY NAME] (“AuLens”, “we”, “us”). This policy explains what information we collect, how we use it, and the choices you have — including data we access on your behalf through Google APIs, WhatsApp, and Zoho CRM.

Controller vs. processor. For the messages and CRM records we process on behalf of a customer organization (your employees' and your customers' conversations and records), the customer organization is the data controller and AuLens acts as a data processor, handling that data only on the customer's instructions and under our agreement with them. For our website, the early-access form, and account administration, AuLens is the controller. If your data is held by AuLens on behalf of your employer or another organization, please direct access or deletion requests to that organization.

Contents

Information we collect
How we use information
Google API Services & Limited Use
Sharing & sub-processors
Data retention
Security
Your rights & choices
Where data is stored
Children
Changes to this policy
Contact us

1. Information we collect

We collect only what's needed to provide the service your organization has enabled:

Account & identity

Your name, email address, profile information from your sign-in provider (e.g. Google), your organization membership, and your role within AuLens.

Google Workspace data (only with your explicit OAuth consent, per user)

Gmail — message content and metadata, accessed read-only, to archive and search your email conversations.
Google Chat — messages, spaces, and attachments, accessed read-only, to archive and search chat conversations.
Google Contacts — contact details, used to resolve who a conversation is with and link it to the right record.

WhatsApp data

Messages, media (images, voice notes, documents), contact identifiers, and delivery/read status from the WhatsApp account(s) your organization chooses to connect through AuLens, so those conversations can be archived, searched, and linked to CRM records.

Zoho CRM data

Contacts, leads, accounts, deals, and vendors retrieved through your authorized Zoho connection, used to associate conversations with the correct CRM record.

Usage & technical data

Logs, IP address, timestamps, feature usage, and audit records (for example, which administrator accessed which data) that we need to operate, secure, and support the service.

Early-access / contact form

The name, work email, company, and details you voluntarily submit to request access.

2. How we use information

To provide the service: archive, search, link conversations to CRM records, and enable oversight and coaching features your organization turns on.
To operate, secure, troubleshoot, and support the service.
To communicate with you about access, updates, and support you request.
To comply with applicable law and enforce our agreements.

We do not sell personal data, and we do not use your conversations or Google Workspace data for advertising.

3. Google API Services & Limited Use

AuLens's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We access Google user data only to provide and improve the archiving, search, and CRM-linking features your organization has enabled.
We do not transfer Google user data to others except as necessary to provide or improve these features, to comply with applicable law, or as part of a merger or acquisition (with notice to affected users).
We do not use Google user data for serving advertising.
We do not allow humans to read Google user data, except: (a) with your affirmative consent for specific messages; (b) where necessary for security, to investigate abuse, or to comply with applicable law; (c) where the data has been aggregated and anonymized for internal operations; or (d) where it is necessary to provide support you have requested.

We share data only as needed to run the service:

Infrastructure / hosting — Amazon Web Services (AWS) hosts the application and stores data. [Confirm + list any other sub-processors: email delivery, error monitoring, the waitlist form provider, etc.]
Legal & safety — when required by law, legal process, or to protect rights, safety, and the integrity of the service.
Your direction — to parties you or your organization authorize (for example, your connected Zoho CRM).

We do not sell personal data to third parties.

5. Data retention

We retain conversation archives and related data for as long as your organization's account is active, or as configured by your organization's retention settings and our agreement with them. On account termination or a verified deletion request, we delete or anonymize the data within a reasonable period, except where we must retain it to comply with legal obligations or resolve disputes. [Confirm retention periods match your contracts before publishing.]

6. Security

We use industry-standard safeguards to protect data, including encryption of data in transit (TLS), role-based access controls that scope what each user can see, isolation of each organization's data, regular backups, and access logging. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit access to those who need it to operate the service.

7. Your rights & choices

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at [CONTACT EMAIL]. If your data is processed by AuLens on behalf of your organization (your employer or a company you do business with), please contact that organization, as they control the data; we will support their response.

You can disconnect a connected Google, WhatsApp, or Zoho account at any time, which stops further data collection from that source. You may revoke Google access directly at your Google Account permissions.

8. Where data is stored

Data is stored and processed in the United States (AWS, US region). If you access AuLens from outside the United States, you understand your data may be transferred to and processed there. [Adjust if your region/region of customers requires specific transfer language, e.g. SCCs.]

9. Children

AuLens is a business tool not directed to children, and we do not knowingly collect personal data from anyone under 18.

10. Changes to this policy

We may update this policy from time to time. When we do, we'll revise the effective date above and, for material changes, provide notice through the service or by email.

11. Contact us

Questions or requests about this policy or your data:

[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
Email: [CONTACT EMAIL]
Governing law: [JURISDICTION]